Cookies are small text files placed on your device when you visit a website. They help the site function, remember your preferences, and collect analytics data.
1.2 Categories of Cookies We Use
| Category | Description | Consent Required? |
| Strictly Necessary | Essential for the website to function (e.g. session cookies, security tokens) | No |
| Functional | Remember your preferences and settings | Yes |
| Analytics | Understand how visitors interact with our website (e.g. Google Analytics) | Yes |
| Marketing | Track engagement to deliver relevant content or adverts | Yes |
Some pages may embed content from third parties (e.g. YouTube videos, LinkedIn widgets, Google Maps). These third parties may set their own cookies. We do not control these cookies; please refer to those parties’ privacy policies.
You can manage your cookie preferences at any time via the Cookie Preferences link in the footer of our website. You may also configure your browser to block or delete cookies; however, this may affect website functionality.
For more information on managing cookies, visit www.allaboutcookies.org or the ICO guidance at ico.org.uk/cookies.
We do not sell your personal data. We may share it with:
- Service providers: hosting providers, email platforms, analytics providers (acting as data processors under our instruction)
- Professional advisers: lawyers, accountants, and insurers where necessary
- Regulatory bodies: where required by law or a competent authority
- Business partners: only with your explicit consent
Any third-party processors are required to implement appropriate technical and organisational measures to protect your data, consistent with UK GDPR and EU GDPR requirements.
3. International Data Transfers
DNYC Ltd is incorporated in the UK. If we transfer your personal data outside the UK or EEA, we will ensure adequate safeguards are in place, such as:
- UK Adequacy Regulations (for transfers from the UK)
- EU Standard Contractual Clauses (SCCs) (for transfers from the EEA)
- UK International Data Transfer Agreements (IDTAs) where applicable
You may request a copy of the relevant transfer mechanism by contacting us at the address in Section 2.
We retain personal data only as long as necessary for the purpose for which it was collected, or as required by law. Our general retention periods are:
| Data Type | Retention Period |
| Contact/enquiry data | 2 years after last interaction |
| Client engagement records | 6 years (legal/tax requirements) |
| Marketing consent records | Until consent is withdrawn + 1 year |
| Website analytics data | 13 months (Google Analytics default) |
| Cookie consent logs | 3 years |
Depending on your location, you have the following rights under UK GDPR and/or EU GDPR:
| Right | Description |
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Request deletion of your data (“right to be forgotten”) |
| Restriction | Ask us to restrict processing while a dispute is resolved |
| Data portability | Receive your data in a structured, machine-readable format |
| Object | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw consent at any time without affecting prior processing |
| Automated decisions | Not be subject to solely automated decision-making with legal effect |
To exercise any of these rights, please contact us at info@dnyc.uk. We will respond within 30 days of receipt of your request. We may ask you to verify your identity before processing your request.
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:
- SSL/TLS encryption on all data transmitted to and from our website
- Access controls and authentication requirements for internal systems
- Regular reviews of our information security policies
No transmission over the internet is completely secure; we cannot guarantee absolute security but take all reasonable precautions.
8. Links to Third-Party Websites
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before submitting any personal data.
We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. The “Last updated” date at the top of this page will always reflect the most recent version. Significant changes will be communicated via a notice on our website or by email where appropriate.
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the relevant supervisory authority:
United Kingdom:
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
📞 0303 123 1113
🌐 ico.org.uk
European Union (if applicable):
Please contact the data protection authority in your country of residence. A list of EU authorities is available at edpb.europa.eu.
We would, however, appreciate the opportunity to address your concerns before you approach a regulator. Please contact us in the first instance at info@dnyc.uk.